Security Basics mailing list archives

Re: any VPN program at linux?


From: "Johannes Ullrich" <jullrich () euclidian com>
Date: Thu, 21 Nov 2002 20:56:28 -0500


I would like to use VPN at linux?
Do you know any recommendable program?

short answer: plenty... 

(1) ssh tunnels, in particular tunneling PPP over ssh
  (+) easy to setup
  (-) only works linux-linux
  (-) tunnels everything over tcp.

(2) CIPE
  (+) comes with redhat.
  (+) a bit better performances (UDP, not TCP like ssh)
  (o) harder to setup then ssh, but not as hard as IPSEC ;-)
  (-) no Windows support I know off.

(3) FreeSwan (IPSEC)
  (+) full IPSec implementation. Very interoperaple.
  (+) very flexible
  (-) pain to setup
  (-) problems with NAT

(4) PPTP (Microsoft VPN)
  (+) works great with all versions of Windows.
  (+) not hard to setup.
  (-) frequently considered less secure then alternatives.
  (-) not as flexible and not as good interoperable as IPSec.
      (but works great as long as you deal with Windows/Linux machines)

There is a pretty good New Riders book: Building Linux VPNs. It walks
you through all these systems (and probably a couple more I forgot) 
  

-- 
--------------------------------------------------------------------
jullrich () euclidian com             Collaborative Intrusion Detection
                                         join http://www.dshield.org

Attachment: _bin
Description:


Current thread: